Notifications
Clear all
Topic starter
15/01/2006 4:26 am
There is a tool called GUID Clean that i just used to clear GUID's from Office Docs.
http//
Version 1 of GUID's had the Mac address inserted into the 128 bit number.
This apparently was used to find and prosecute later the creator of the Melissa Virus.
Anyway does anyone know of info's on formats of the GUID froma Forensics perspective ?
Regs
Raz - CISSP , CEH , CHFI , ISS , 7799
15/01/2006 6:24 pm
> Anyway does anyone know of info's on formats of the GUID froma Forensics perspective ?
What exactly are you looking for beyond what you've already mentioned?
My second hit on Google found this
http//
H. Carvey
"Windows Forensics and Incident Recovery"
http//
http//windowsir.blogspot.com